## Microsoft-Windows-Win32k

Seen on:
* Windows 2008
* Windows 7

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Name:</b></td>
      <td>Microsoft-Windows-Win32k</td>
    </tr>
    <tr>
      <td><b>Identifier:</b></td>
      <td>{e7ef96be-969f-414f-97d7-3ddb7b558ccc}</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\system32\win32k.sys</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows 2012
* Windows 8.0
* Windows 8.1

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Name:</b></td>
      <td>Microsoft-Windows-Win32k</td>
    </tr>
    <tr>
      <td><b>Identifier:</b></td>
      <td>{8c416c79-d49b-4f01-a467-e56d3aa8234c}</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\system32\win32k.sys</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows 10 (1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2)
* Windows 2016
* Windows 2019
* Windows 11 (21H2)

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Name:</b></td>
      <td>Microsoft-Windows-Win32k</td>
    </tr>
    <tr>
      <td><b>Identifier:</b></td>
      <td>{8c416c79-d49b-4f01-a467-e56d3aa8234c}</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\system32\win32kbase.sys</td>
    </tr>
  </tbody>
</table>

&nbsp;